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DETAILED ACTION 
Response to Request for Reconsideration 

The examiner is in receipt of applicant's response to office action mailed 
5/18/2004, which was received 8/2/2004. Acknowledgement is made that no 
amendments were made to the application, leaving claims 106-181 as pending in the 
instant application. Applicant's remarks have been carefully considered, but were found 
not to be persuasive; therefore the previous rejection has been restated below: 

Official Notice Traversal 

A "traverse" is a denial of an opposing party's allegations of fact. The 
Examiner respectfully submits that applicants' arguments and comments do not 
appear to traverse what Examiner regards as knowledge that would have been 
generally available to one of ordinary skill in the art at the time the invention 
was made. Even if one were to interpret applicants' arguments and comments 
as constituting a traverse, applicants' arguments and comments do not appear 
to constitute an adequate traverse because applicant has not specifically 
pointed out the supposed errors in the examiner's action, which would include 
stating why the noticed fact is not considered to be common knowledge or well- 
known in the art. 27 CFR 1.104(d)(2), MPEP 707.07(a). An adequate traverse 
must contain adequate information or argument to create on its face a 
reasonable doubt regarding the circumstances justifying Examiner's notice of 
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what is well known to one of ordinary skill in the art. In re Boon , 439 F.2d 724, 
728, 169 USPQ 231, 234 (CCPA1971). 

If applicant does not seasonably traverse the well known statement during 
examination, then the object of the well known statement is taken to be admitted prior 
art. In re Chevenard, 139 F.2d 71, 60 USPQ 239 (CCPA 1943). 

Examiner's Note 

Examiner has cited particular columns and line numbers or figures in the 
references as applied to the claims below for the convenience of the applicant. 
Although the specified citations are representative of the teachings in the art and are 
applied to the specific limitations within the individual claim, other passages and figures 
may apply as well. It is respectfully requested from the applicant, in preparing the 
responses, to fully consider the references in entirety as potentially teaching all or part 
of the claimed invention, as well as the context of the passage as taught by the prior art 
or disclosed by the examiner. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C.§ 103(a) which forms the basis for all 

obviousness rejections set forth in this Office Action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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5. First of all, it is known with one of ordinary skill in the art that a DRM system 
obviously contains a structure/"box" with encryption/decryption keys inside (as claiming 
a digital right management having encryption/decryption keys (or a public/private key 
pair which is similar to encryption/decryption keys)). 

Downs et al. (US Pat. 6,226,618) disclose in the description of the related art 
portion: "Further information on the background of protecting digital content can be found from the 
following three sources. "Music on the Internet and the Intellectual Property Protection Problem" by Jack 
Lacy, James Snyder, David Maher, of AT&T Labs, Florham Park, NJ. available online URL 
http://www.a2bmusic.com/about/papers/musicipp.htm. Cryptographically protected container, called 
DigiBox, in the article "Securing the Content, Not the Wire for Information Commerce" by Olin Sibert, 
David Bernstein and David Van Wie, InterTrust Technologies Corp. Sunnyvale, Calif, available online 
URL http://www.intertrust.com/architecture/stc.html. And "Cryptolope Container Technology", an IBM 
White Paper, available online URL http:///cyptolope. ibm.com/white.htm". 
- A DRM system (109) of Downs et al. has all features of claim 106, Downs et al. 
disclose "5. End-User Device(s) 109 

The End-User Device(s) 109 can be any player device that contains an End-User Player Application 195 
(described later) compliant with the Secure Digital Content Electronic Distribution System 100 
specifications. These devices may include PCS, set top boxes (IRDs), and Internet appliances. The End- 
User Player Application 195 could be implemented in software and/or consumer electronics hardware. In 
addition to performing play, record, and library management functions, the End-User Player Application 
195 performs SC processing to enable rights management in the End-User Device(s) 109. The End-User 
Device(s) 109 manages the download and storage of the SCs containing the Digital Content; requests 
and manages receipt of the encrypted Digital Content keys from the Clearinghouse(s) 105; processes the 
watermark(s) every time the Digital Content is copied or played; manages the number of copies made (or 
deletion of the copy) in accordance with the Digital Content's Usage Conditions; and performs the copy to 
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an external media or portable consumer device if permitted. The portable consumer device can perform a 
subset of the End-User Player Application 195 functions in order to process the content's Usage 
Conditions embedded in the watermark. The terms End-User(s) and End-User Player Application 195 are 
used throughout this to mean through the use or running-on an End-User Device(s) 109". 

A. Claims 106-111 : They are rejected under 35 U.S.C.§ 103(a) as being unpatentable 

over Downs et al. (US Pat. 6,226,618). 

Downs et al. teach a method of obtaining a structure having. 

encryption/decryption keys, comprising: 

- requesting encryption/decryption keys (see Downs, in 7:55-58, "Only users who have 
decryption keys can unlock the encrypted Content, and the Clearinghouse(s) releases 
decryption keys only for authorized and appropriate usage requests."; 

- generating, a public/private key pair (or in other words, encryption/decryption keys), 
(see Downs 15:50-52," Process Flow for Encryption Process of FIG. 3 

Step Process 

301 Sender generates a random symmetric key and uses it to encrypt the 
content" ; 

- delivering encryption/decryption keys (see Downs, Fig. 1 D, this teaches a step of 
delivering and installing (E) the black box (194) in a DRM system); and installing 
encryption/decryption keys in a DRM system. 

- Downs et al. teach that in 1 5:2-1 5." Detailed Description Text (69): 

This document uses a drawing to graphically represent SC(s) that shows 
encrypted parts, non-encrypted parts, the encryption keys, and certificates. 
Referring now to FIG. 2 is an example drawing of SC(s) 200. The following 
symbols are used in the SC(s) figures. Key 201 is a public or private key. The 
teeth of the key e.g. CLRNGH for Clearinghouse indicate the key owner. PB 
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inside the handle indicates that it is a public key thus key 201 is a Clearinghouse 
public key. PV inside the handle indicates that it is a private key. Diamond shape 
is an End-User Digital Signature 202. The initials indicate which private key was 
used to create the signature thus in EU is the End-User(s) digital signature from 
table below. Symmetric key 203 is used to encrypt content.". 
It is reasonable that different modifications of the described suggestions of 
Downs et al. would be apparent to those skilled in the art without departing from the 
scope and spirit of their disclosures (this pending case has a Sensitive Application 
Warning system issues from USPTO because it pits Microsoft against IBM). It should 
be understood that their suggestions should not be limited to specific embodiments in 
said disclosures. 

It would have been obvious to one of ordinary skill in the art at the time of 
invention to implement the system of Downs et al. to claim a method using a DRM 
system to obtain a black box from a server (143-144) including requesting (D) a black 
box, creating a black box and delivering and installing (E) the black box (194) in the 
DRM system (109) because these particular available information would improve a level 
of security for a digital right management system. 

B. Claim 107 : This claims about the method of claim 1 06 wherein the DRM 
system has a previously installed structure relating to (encryption/decryption keys) prior 
to the requesting step , the method further comprising determining prior to the requesting 
step that the previously installed structure is non-unioue . 

The rationales and reference for rejection of claim 106 are incorporated. 
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The examiner submits that it is obvious to one with skill in the art to utilize Downs 
et al. ideas to edit if there is a critical difference in previously procedure (i.e., edit if 
previously installed black box is not current"} procedure because the order is still 
logic/reasonable/making sense. It would be obvious to artisans that a step of 
" determining prior to the requesting step that the previously installed structure is non- 
unigue " have been known to be easily done to avoid any possible error/conflict in 
computer world (furthermore, the claimed phrase is merely about an intent of use with a 
box containing public/private key pair and not contributing to a step of obtaining a black 
box , this is obvious to one with ordinary skill in the art as an application for a particular 
purpose). 

C. Claim 108 : This claims about the method of claim 106 wherein the DRM 
system has a previously installed structure prior to the requesting step, the method 
further comprising determining prior to the reguesting step that the previously installed 
structure is not current . 

The rationales and reference for rejection of claim 106 are incorporated. 

The examiner submits that this claimed step is obviously analogous to claim 
107's limitation because a step of "checking if encryption/decryption key is unique" is 
similar to "checking to see if said keys are current or not"; therefore, similar rationales 
and reference for an obviousness rejection of claim 107 are applied. 

D. Claim 109: The rationales and reference for rejection of claim 1 06 are 
incorporated. 



Application/Control Number: 09/482,840 Page 8 

Art Unit: 3625 

This claims about the method of claim 1 06 with requesting the structure (a 
unique public/private key pair (for performing the decryption and encryption functions)) 
by way of a network connection to a server (see Downs et al., 1:62-67). 

E. Claim 110 : The rationales and reference for rejection of claim 109 are 
incorporated. 

This claims about the method of claim 109 wherein the requesting step 
comprises requesting the structure by way of an Internet connection to the structure 
server (see Downs et al., 1:62-67). 

F. Claim 111 :This claim' limitations are obviously analogous to limitations of claim 106 
(merely claiming providing a box having public/private key pair). Therefore, similar 
rationales and references set forth are applied for a rejection under 35 U.S.C.§ 103(a). 

G. Claim 112 : The rationales and reference for rejection of claim 1 1 1 are 
incorporated. 

This claims about the method of claim 1 1 1 wherein the DRM system had a 
second previously installed structure prior to having the first previously installed 
structure, the second previously installed structure having a public/private key pair 
different from the public/private key pair of the first previously installed structure and 
also different from the public/private key pair of the generated structure , and wherein 
the generating step further includes providing the generated structure with the 
public/private key pair of the second previously installed structure. 

The examiner submits that this claimed step is obviously analogous to claim 
111's limitation because analogous repetition of a step is claimed (i.e., merely providing 
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a box with a public/private key pair); therefore, similar rationale and reference are 
applied. 

H. Claim 113 : The rationales and reference for rejection of claim 106 are 
incorporated. 

This claims about the method of claim 106 wherein the generating step is 
capable of identifying a current status. 

Downs et al. teach about checking a current status in Detailed Description Text 
(para. 323): 

"Any problem discovered, even minor text changes requires that the SC(s) be rebuilt 
due to internal security features of SC(s). To avoid unnecessary re-processing time, it is 
highly recommended that the interim quality assurance steps be utilized to assure 
accuracy of the metadata and that this specific quality assurance step be reserved for 
validating appropriate cross references between the SC(s) associated with this song. If 
problems are found, the assurer can enter a problem description to be attached to the 
song and have it re-queued to the appropriate processing queue for reprocessing. 
Status is updated appropriately in the Work Flow Manager 154 to indicate the status of 
all related components of the song. If no problems are discovered, the Content 1 13 is 
marked or flagged as ready for release", 
and in Detailed Description Text (para. 344): 

"The Content Hosting Router(not shown) resides in the Content Hosting Site(s) 1 1 1 and 
receives all requests from End-User(s) wanting to download Content 1 13. It performs 
validation checks on the End-User(s) request to ensure they indeed bought the Content 



Application/Control Number: 09/482,840 Page 10 

Art Unit: 3625 

1 13. A database is maintained on the status of the Secondary Content Sites that 
includes what Content 1 13 is on them and there current status . This current status 
includes the amount of activity on the sites and whether a site is down for 
maintenance." 

I. Claim 114 : The rationales and reference for rejection of claim 1 13 are incorporated. 

This claims about the method of claim 1 13 wherein the generating step includes 
providing the generated structure with a version number . The examiner submits that "a 
version number" is merely for identification purpose, this limitation does not contribute to 
a limitation about a method for obtaining a black box with public/private key pair. 

It would have been obvious to one of ordinary skill in the art at the time of 
invention to implement the system of Downs et al. to claim a method having a version 
number of a box that contains a public/private key pair because that is a way to 
index/organize software related materials. 

J. Claims 115-116 : The rationales and reference for rejection of claim 106 are 
incorporated. 

This claims about the method of claim 106 wherein the generating step includes 
providing a digital certificate (see Downs et aL, " Detailed Description Text (100): 
License control requires that the Content Proyider(s) 101 , the Electronic Digital Content 
Store(s) 103, and the Clearinghouse(s) 105 have bona-fide cryptographic digital 
certificates from reputable Certificate Authorities that are used to authenticate those 
components. The End-User Device(s) 109 are not required to have digital certificates."). 
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K. Claim 116 : The rationales and reference for rejection of claim 1 1 5 are 
incorporated. 

The examiner submits that this claim's limitation is similar to claim 1 15's 
limitation; therefore, similar rationale & reference for an obvious rejection are applied. 
L. Claims 117-118 : The rationales and reference for rejection of claim 1 17 are 
incorporated. 

- Downs et al. teach about encrypting a private key (see " Detailed Description Text 
(181): 

One Symmetric Key 623 is used for decrypting the watermarking instructions and the 
other for decrypting the Content 113 and any encrypted metadata. The watermarking 
instructions are included within the Metadata SC(s) 620 portion in the Order SC(s) 650. 
The Content 113 and encrypted metadata are in the Content SC(s) 630 at a Content 
Hosting Site(s) 111. The URL and part names of the encrypted Content 1 1 3 and 
metadata parts, within the Content SC(s) 630, are included in the Key Description part 
of the Metadata SC(s) 620 portion of the Order SC(s) 650. The Clearinghouse(s) 1 05 . 
uses its private key to decrypt the Symmetric Keys 623 and then encrypts each of them 
using the Public Key 661 of the End-User Device(s) 109. The Public Key 661 of the 
End-User Device(s) 109 is retrieved from the Order SC(s) 650. The new encrypted 
Symmetric Keys 623 is included in the Key Description part of the License SC(s) 660 
that the Clearinghouse(s) 105 returns to the End-User Device(s) 109." - please note 
that another term for symmetric-key encryption is private-key encryption. 
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M. Re. to claim 117 :The examiner submits that this claim's limitation is similar to claim 
1 18's limitation; therefore, similar rationale & reference for an obvious rejection are 
applied. 

N. Claims 119-121 : The rationales and reference for rejection of claim 106 are 
incorporated. 

This claims a feature of a box having a public/private key pair is inoperable on 
another DRM system. This is obvious with Downs et al.'s system because "a match" for 
a public/private key pair with its associating DRM system MUST be required (e.g., 
Downs et al. disclose that "The Clearinghouse(s) 105 verifies that the name of the 
Content Provider(s) 101 encrypted together with the Symmetric Keys 623 matches the 
name of the Content Provider(s) 101 in the SC(s) certificate."). 
O. Claim 120 : The examiner submits that this claim's limitation is obvious from 
claim 1 19's limitation (i.e., a public/private key pair is generated based on provided 
information, that key pair is corresponding to a DRM system); therefore, similar rationale 
& reference for an obvious rejection are applied. The examiner submits that 
encryption/decryption keys have been known by artisans to be associated with distinct 
devices for identification purposes. 
P. Claim 121 : 

This claim is about a method of claim 119 wherein the DRM system is a first 
DRM system, wherein the generating step includes associating 1st structure with a 1 st 
device, and associating a 2 nd structure with a 2 nd devices. This is obvious by an exact 
repetition step that claiming in claim 119. 
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6. Re. to Claims 122. 138, 152. 168 : These claims' limitations are obviously analogous 
to limitations of claim 106 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 

7. Re. to Claims 125, 139, 155. 169 : These claims' limitations are obviously analogous 
to limitations of claim 109 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 

8. Re. to Claims 126, 140, 156. 170 : These claims' limitations are obviously analogous 
to limitation(s) of claim 110 (although a method or a computer-readable medium 
teaching a similar method is presented). Therefore, similar rationales and references 
set forth are applied for a rejection under 35 U.S.C.§ 103(a). 

9. Re. to Claims 127, 141, 157. 171 : These claims' limitation(s) are obviously analogous 
to limitation(s) of claim 111 (although a method or a computer-readable medium 
teaching a similar method is presented). Therefore, similar rationales and references 
set forth are applied for a rejection under 35 U.S.C.§ 103(a). 

10. Re. to Claims 128, 142, 158, 172 : These claims' limitations are obviously analogous 
to limitation(s) of claim 112 (although a method or a computer-readable medium 
teaching a similar method is presented). Therefore, similar rationales and references 
set forth are applied for a rejection under 35 U.S.C.§ 103(a). 

1 1 . Re. to Claims 1 29, 1 43, 1 59, 1 73 : These claims' limitations are obviously analogous 
to limitations of claim 113 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 
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12. Re. to Claims 130, 144. 160. 174 : These claims' limitations are obviously analogous 
to limitations of claim 114 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 

13. Re. to Claims 131, 145. 161, 175 : These claims' limitations are obviously analogous 
to limitations of claim 115 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 

14. Re. to Claims 132, 146. 162. 176 : These claims' limitations are obviously analogous 
to limitations of claim 116 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 

15. Re. to Claims 133. 147. 163. 177 : These claims' limitations are obviously analogous 
to limitations of claim 117 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 

16. Re. to Claims 134, 148. 164. 178 : These claims' limitations are obviously analogous 
to limitations of claim 118 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 

17. Re. to Claims 135. 149. 165. 179 : These claims' limitations are obviously analogous 
to limitations of claim 119 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 
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18. Re. to Claims 136, 150, 166, 180 : These claims' limitations are obviously analogous 
to limitations of claim 120 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 

19. Re. to Claims 137, 151. 167, 181 : These claims' limitations are obviously analogous 
to limitations of claim 121 (although a method or a computer-readable medium teaching 
a similar method is presented). Therefore, similar rationales and references set forth 
are applied for a rejection under 35 U.S.C.§ 103(a). 

20. Re. to Claims 153, 123 : These claims' limitations are obviously analogous to 
limitations of claim 107 (although a method or a computer-readable medium teaching a 
similar method is presented). Therefore, similar rationales and references set forth are 
applied for a rejection under 35 U.S.C.§ 103(a). 

21. Re. to Claims 154, 124 : These claims' limitations are obviously analogous to 
limitations of claim 108 (although a method or a computer-readable medium teaching a 
similar method is presented). Therefore, similar rationales and references set forth are 
applied for a rejection under 35 U.S.C.§ 103(a). 

Response to Arguments 

Applicant's arguments filed August 2, 2004 have been fully considered but they 
are not persuasive. 

Applicant argues that the examiner did not consider the recited "black box" to be 
a device. However, the "black box" that the applicant claims, is referred to in the 
specification as being a "software component" that is operable on a users computer 
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device (see at least - page 3, lines 3-10). Therefore, the examiner correctly understands 
the claimed "black box" to be a downloadable software application, which is clearly 
recited in Downs as a "secure container". 

In response to applicant's argument that the reference fails to show certain 
features of applicant's invention, it is noted that the feature upon which applicant relies 
(i.e., updating the encryption during an order) is not specifically recited in the rejected 
independent claims 106,122,138,152 or 168, as applicant contends. Although the 
claims are interpreted in light of the specification, limitations from the specification are 
not read into the claims. See In re Van Geuns, 988 F.2d 1181, 26 USPQ2d 1057 (Fed. 
Cir. 1993). Furthermore, Downs clearly teaches updating of the cryptology to assure 
that fraud is not taking place in the order process (col 29, lines 45-60, col 27, lines 40- 
50, and col 43, line 55 to col 44, line 4). 

Conclusion 

THIS ACTION IS MADE FINAL Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 . 1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 



Application/Control Number: 09/482,840 Page 17 

Art Unit: 3625 

the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Mark Fadok whose telephone number is (703) 605- 
4252. The examiner can normally be reached Monday thru Thursday 8:00 AM to 5:00 
PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Wynn Coggins can be reached on (703) 308-1344. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the Receptionist whose telephone number is (703) 
308-1113. 

Any response to this action should be mailed to: 

Commissioner for Patents 
P.O. Box 1450 

Alexandria, Va. 22313-1450 

or faxed to: 

(703) 872-9306 [Official communications; including 
After Final communications labeled 
"Box AF"] 

(703) 746-7206 [Informal/Draft communications, labeled 
"PROPOSED" or "DRAFT"] 
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Hand delivered responses should be brought to Crystal Park 5, 2451 Crystal 
Drive, Arlington, VA, 7 th floor receptionist. 




Patent Examiner 



